Nextcloud vulnerabilities
306 CVEs and advisories name Nextcloud as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-66552Nextcloud Server admin_audit does not log all actions on files in groupfolders
- CVE-2025-66547Nextcloud Server users can modify tags on files that do not belong to them
- CVE-2025-66512Nextcloud Server vulnerable to XSS in SVG images when opened outside of Nextcloud
- CVE-2025-66510Nextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their contact list
- CVE-2025-59788Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0
- CVE-2025-58051Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table
- CVE-2025-47794Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission
- CVE-2025-47793Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file
- CVE-2025-47792Nextcloud Desktop 3rdparty applications can create share links via socket API
- CVE-2025-47791Nextcloud Server's test remote endpoint is not rate limited
- CVE-2025-47790Nextcloud Server doesn't request second factor after session timeout
- CVE-2024-52509Nextcloud Mail app does not respect download permissions in shares
- CVE-2024-52508Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers
- CVE-2024-52510Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty
- CVE-2024-52507Share information of the Nextcloud Tables app is not limited to affected users
- CVE-2024-52511Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables
- CVE-2024-52512Nextcloud User OIDC has an open redirection when logging in with User OIDC
- CVE-2024-52513Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares
- CVE-2024-52514Nextcloud Server allows users to copy folder that contain files that are blocked by the files access control
- CVE-2024-52515Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews
- CVE-2024-52516Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them
- CVE-2024-52517Nextcloud Server's global credentials of external storages are sent back to the frontend
- CVE-2024-52518Nextcloud Server is missing password confirmation when changing external storage options
- CVE-2024-52519Nextcloud Server's OAuth2 client secrets were stored in a recoverable way
- CVE-2024-52520Nextcloud Server's link reference provider can be tricked into downloading bigger files than intended
- CVE-2024-52521Nextcloud Server has a potential hash collision for background jobs could skip queuing them
- CVE-2024-52523Nextcloud Server Custom defined credentials of external storages are sent back to the frontend
- CVE-2024-52525Nextcloud Server User password is available in memory of the PHP process
- CVE-2024-37887Nextcloud Server's events information leaked with shared calendars on recurrence exceptions
- CVE-2024-37886Nextcloud user_oidc's ID4me does not validate signature or expiration